CVE-2012-0015

published 2012-02-14

CVE-2012-0015: Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly calculate the length of an unspecified buffer, which allows remote attackers to execute arbitrary…

critical 9.3 CVSS 3.1

AV N AC M Au N C C I C A C

Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not properly calculate the length of an unspecified buffer, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka ".NET Framework Heap Corruption Vulnerability."

Affected

2 ranges

Vendor	Product	Version range	Fixed in
microsoft	net_framework	—	—
microsoft	net_framework	—	—

CWE-94